Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support for RHEL 9 #160

Open
ryoung1us opened this issue Jun 1, 2023 · 6 comments
Open

Support for RHEL 9 #160

ryoung1us opened this issue Jun 1, 2023 · 6 comments
Labels
enhancement New feature or request

Comments

@ryoung1us
Copy link

The ansible code needs to support RHEL 9 for the KVM hosts AND guests.

@AmadeusPodvratnik AmadeusPodvratnik added the enhancement New feature or request label Jun 15, 2023
@mohammedzee1000
Copy link
Member

mohammedzee1000 commented Mar 13, 2024

Main Issues found:

  • libvirt-devel package is not available by default in rhel 9. (Requires codeready entitlements (CRB channel) to use but may not even be needed) - KVM Host
  • package "network-scripts" does not exists on RHEL9. I did find NetworkManager-initscripts-updown.noarch : Legacy ifup/ifdown scripts for NetworkManager that replace initscripts (network-scripts) - KVM bastion issue
  • robertdebock.openvpn dependencies cannot be installed on RHEL 9. Need to find alternatives for multi cluster. - KVM Host issue
  • Password authentication is turned off by default in RHEL 9. Can we overcome by adding below to kickstart
    echo "PasswordAuthentication yes" >> /etc/ssh/sshd_config
    echo "PermitRootLogin yes" >> /etc/ssh/sshd_config
    systemctl restart sshd
    • KVM bastion issue
  • FIPS installations will have issues with oc binary (this issues is at openssl level and may not need out attention) - general

Minor Issues:

  • The default python3 package version in RHEL 8 is 3.6.x and RHEL9 is 3.9.x. With this python 3.9 version you are only able to install ansible 8.7. Not higher. The latest ansible version 9.2 requires python 3.11. Not a pressing issue as standard ansible-core package in rhel is enough to run our playbooks - controller issue

Note: ocp 4.15 onwards, the oc mirror binary required higher glibc version not available on rhel 8 and order oc mirror cannot be used to mirror ocp 4.15 if you are using rhel 8 as mirror host.

@mohammedzee1000
Copy link
Member

mohammedzee1000 commented Mar 19, 2024

@smolin-de
Copy link
Contributor

smolin-de commented Mar 19, 2024

FYI.
I made a mistake.
The default python3 version on RHEL 8.8 is 3.6 and not 3.9 !

@mohammedzee1000
Copy link
Member

Moving to rhel 9 could potentially close #187

@mohammedzee1000
Copy link
Member

FYI. I made a mistake. The default python3 version on RHEL 8.8 is 3.6 and not 3.9 !

@smolin-de updated in the issue list

@smolin-de
Copy link
Contributor

@mohammedzee1000 @AmadeusPodvratnik
Here is my RHEL9 kickstart file which I used so far:
https://github.com/smolin-de/Ansible-OpenShift-Provisioning/blob/development/roles/create_bastion/templates/rhel9-bastion-ks.cfg.j2

AmadeusPodvratnik added a commit to AmadeusPodvratnik/Ansible-OpenShift-Provisioning that referenced this issue Mar 22, 2024
Disable openvpn and set to deprecated and will be removed
in upcoming releases.

Signed-off-by: Amadeuds Podvratnik <pod@de.ibm.com>
AmadeusPodvratnik added a commit that referenced this issue Mar 25, 2024
Disable openvpn and set to deprecated and will be removed in upcoming
releases.

Signed-off-by: Amadeuds Podvratnik <pod@de.ibm.com>
Co-authored-by: Veerabhadrarao Damisetti <damisetti.veerabhadrarao@ibm.com>
smolin-de pushed a commit to smolin-de/Ansible-OpenShift-Provisioning that referenced this issue Mar 25, 2024
Disable openvpn and set to deprecated and will be removed in upcoming
releases.

Signed-off-by: Amadeuds Podvratnik <pod@de.ibm.com>
Co-authored-by: Veerabhadrarao Damisetti <damisetti.veerabhadrarao@ibm.com>
smolin-de added a commit to smolin-de/Ansible-OpenShift-Provisioning that referenced this issue Apr 18, 2024
Add RHEL9 kickstart for bastion host (IBM#160).

Signed-off-by: Klaus Smolin <smolin@de.ibm.com>
smolin-de added a commit to smolin-de/Ansible-OpenShift-Provisioning that referenced this issue Apr 18, 2024
Add RHEL9 kickstart for bastion host (IBM#160).

Signed-off-by: Klaus Smolin <smolin@de.ibm.com>
smolin-de added a commit to smolin-de/Ansible-OpenShift-Provisioning that referenced this issue Apr 18, 2024
Add RHEL9 kickstart for bastion host (IBM#160).

Signed-off-by: Klaus Smolin <smolin@de.ibm.com>
smolin-de added a commit to smolin-de/Ansible-OpenShift-Provisioning that referenced this issue Apr 23, 2024
Add RHEL9 kickstart for bastion host (IBM#160).
Support for openvpn must be removed in an additional PR, because the
robertdebock.openvpn packages can not be installed on RHEL9.

Signed-off-by: Klaus Smolin <smolin@de.ibm.com>
smolin-de added a commit to smolin-de/Ansible-OpenShift-Provisioning that referenced this issue Apr 23, 2024
Add RHEL9 kickstart for bastion host (IBM#160).
Support for openvpn must be removed in an additional PR, because the
robertdebock.openvpn packages can not be installed on RHEL9.

Signed-off-by: Klaus Smolin <smolin@de.ibm.com>
AmadeusPodvratnik pushed a commit that referenced this issue Apr 24, 2024
Add RHEL9 kickstart for bastion host (#160).
Support for openvpn must be removed in an additional PR, because the
robertdebock.openvpn packages can not be installed on RHEL9.

Signed-off-by: Klaus Smolin <smolin@de.ibm.com>
smolin-de added a commit to smolin-de/Ansible-OpenShift-Provisioning that referenced this issue Apr 29, 2024
Add RHEL9 kickstart for bastion host (IBM#160).
Support for openvpn must be removed in an additional PR, because the
robertdebock.openvpn packages can not be installed on RHEL9.

Signed-off-by: Klaus Smolin <smolin@de.ibm.com>
sandisamp pushed a commit to sandisamp/Ansible-OpenShift-Provisioning that referenced this issue May 10, 2024
Disable openvpn and set to deprecated and will be removed in upcoming
releases.

Signed-off-by: Amadeuds Podvratnik <pod@de.ibm.com>
Co-authored-by: Veerabhadrarao Damisetti <damisetti.veerabhadrarao@ibm.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

4 participants